What has changed?

Vulnerabilities in Fortinet products and BeyondTrust are being attacked

CISA confirms active exploitation of both vulnerabilities and adds them to the KEV catalog , patching is therefore not preventive but acutely urgent.

[UPDATE] Siemens SIMATIC S7: Multiple Vulnerabilities

The advisory bundles multiple vulnerabilities across several SIMATIC S7 product lines, pointing to a broad patching window in OT environments where updates can only be applied during maintenance windows.

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

The report shows that a legitimate signed Siemens application is being abused as a DLL sideloading host for an active ClickFix malware campaign, a risk that goes beyond classic patch information.

Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack

The report shows that state-sponsored actors use Fortinet edge devices not only for initial access but to establish a persistent, hard-to-detect implant platform inside the target network.

[UPDATE] Fortinet FortiOS, FortiProxy and FortiSwitch: Vulnerability allows file manipulation

The attack requires local access, so the risk is mainly relevant for already compromised or multi-stage attacked environments with FortiGate and FortiProxy appliances.

[UPDATE] Google Chrome / Microsoft Edge: Multiple vulnerabilities enable unspecified attacks

The advisory summarizes multiple browser vulnerabilities without CVE IDs, severity ratings or exploitation evidence, thus offering little concrete prioritization guidance.

Linux Kernel: Multiple Vulnerabilities

[UPDATE] Linux Kernel: Vulnerability Allows Gaining Administrator Rights

The BSI update confirms the ongoing relevance of local privilege escalation in the Linux kernel without providing new details on exploitation.